Lucene search
K

36 matches found

BDU FSTEC
BDU FSTEC
added 2024/03/05 12:0 a.m.1 views

The vulnerability of the IBM i operating system, related to the lack of measures taken to protect the SQL query structure, allows attackers to enhance their privileges.

The vulnerability of the IBM i operating system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

8.3CVSS7.2AI score0.00293EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/07 12:0 a.m.1 views

The vulnerability of the QTS, QuTS hero, and QuTScloud operating systems for QNAP network devices stems from the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of the QTS, QuTS hero, and QuTScloud operating systems for QNAP network devices is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS8.1AI score0.00087EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/02/06 12:0 a.m.1 views

The vulnerability of the NEXO-OS operating system in the Bosch Nexo cordless nutrunner and Bosch Nexo special cordless nutrunner tools used in production lines allows a intruder to gain unauthorized access to the database.

The vulnerability of the NEXO-OS operating system for tools used in production line assembly work, such as the Bosch Nexo cordless nutrunner and the Bosch Nexo special cordless nutrunner, is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability ca...

5.3CVSS7.3AI score0.00242EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/17 12:0 a.m.1 views

The vulnerability of the IBM Security Guardium information protection mechanism lies in its failure to protect the structure of SQL queries. This allows attackers to view, add, modify, or delete information in the internal database.

The vulnerability of the IBM Security Guardium security tool is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to remotely access, view, add, modify, or delete information in the internal database...

8CVSS6AI score0.00073EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/17 12:0 a.m.1 views

The vulnerability of Fortinet FortiWLM, a centralized management system for WLAN access points and LAN switches, stems from the lack of protective measures for the SQL query structure. This allows attackers to execute arbitrary SQL queries against the database.

The vulnerability of Fortinet FortiWLM, a centralized management system for WLAN access points and LAN switches, relates to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL queries against the database remotely...

10CVSS8.2AI score0.09797EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/09/25 12:0 a.m.1 views

The vulnerability in the Nagios XI monitoring tool’s script for nagiosxi/admin/banner_message-ajaxhelper.php allows a attacker to disclose protected information.

The vulnerability in the nagiosxi/admin/bannermessage-ajaxhelper.php script of Nagios XI relates to the failure to protect the SQL query structure during the processing of the ID parameter. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

6.8CVSS6.9AI score0.84148EPSS
Exploits2References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/11/22 12:0 a.m.1 views

The vulnerability of the my_decimal::operator database component, which allows a hacker to trigger a service failure.

The vulnerability of the mydecimal::operator component of the MariaDB database lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to trigger service failures through a specially crafted SQL query...

7.8CVSS7.5AI score0.00295EPSS
Exploits1References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/07/25 12:0 a.m.1 views

The vulnerability of the FUEL CMS content management system lies in the lack of protection for SQL query structures, which allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the FUEL CMS content management system lies in the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information through the col parameter in...

10CVSS8.1AI score0.17515EPSS
Exploits4References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.1 views

The vulnerability of the information system openSIS, related to the failure to protect the SQL query structure, allows a perpetrator to execute arbitrary SQL queries.

The vulnerability of the information system openSIS is related to the failure to implement measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries using the NamesList.php parameter...

10CVSS8.2AI score0.07073EPSS
Exploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/07 12:0 a.m.1 views

The vulnerability of the KTS web interface “Mayak,” related to the failure to protect the SQL query structure, allows attackers to execute arbitrary SQL commands.

The vulnerability of the KTS “Lighthouse” web interface is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands using a specially crafted HTTP POST request...

10CVSS6.1AI score
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/12/07 12:0 a.m.1 views

The vulnerability of the KTS web interface “Mayak,” related to the failure to protect the SQL query structure, allows attackers to execute arbitrary SQL commands.

The vulnerability of the KTS “Lighthouse” web interface is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands using a specially crafted HTTP POST request...

10CVSS6.1AI score
Exploits0Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/10/01 12:0 a.m.1 views

The vulnerability of the VeloCloud Orchestrator component of the VMware SD-WAN programmable network management platform lies in the lack of security measures for the SQL query structure. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the VeloCloud Orchestrator component of the VMware SD-WAN programmable network management platform relates to the lack of security measures for the SQL query structure. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and...

10CVSS0.00359EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/04/06 12:0 a.m.1 views

The vulnerability of the Redmine project and task management web application relates to the failure to protect the SQL query structure, allowing an attacker to gain unauthorized access to protected information.

The vulnerability of the Redmine project and task management web application relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information from a remote location...

6.8CVSS0.27968EPSS
Exploits2References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2019/12/26 12:0 a.m.1 views

The vulnerability of the web interface of the Cisco Digital Network Architecture (DNA) Center, related to the lack of protective measures for the SQL query structure, allows a perpetrator to execute arbitrary code.

The vulnerability of the Cisco Digital Network Architecture DNA Center’s network management web interface is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

6.5CVSS0.00548EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:0 a.m.1 views

The vulnerabilities of the `django.contrib.postgres_fields.HStoreField` and `django.contrib.postgres_fields.JSONField` functions in the Django framework are related to the lack of measures to protect SQL query structures. This allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the django.contrib.postgresfields.HStoreField and django.contrib.postgresfields.JSONField functions in the Django web development framework is related to conversion and key search errors, as well as index searching issues. Exploiting this vulnerability can allow an attacker t...

10CVSS7.8AI score0.29723EPSS
Exploits0References10Affected Software7
BDU FSTEC
BDU FSTEC
added 2015/11/20 12:0 a.m.2 views

The vulnerability of the Cisco Secure Access Control System’s access control system allows a perpetrator to execute arbitrary SQL commands.

The vulnerability of the Solution Engine component of the Cisco Secure Access Control System relates to the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands using a specially crafted URL...

6.5CVSS0.00311EPSS
Exploits0References2
Rows per page
Query Builder